Keyboard signature security system

• US 6,405,922 B1
• Filed: 05/15/2000
• Issued: 06/18/2002
• Est. Priority Date: 10/02/1997
• Status: Expired due to Term

• Current Assignee: Kroll Family Trust
• Original Assignee: Kroll Family Trust
• Inventors: Kroll, Mark W.
• Primary Examiner(s): Lee, Michael G.
• Assistant Examiner(s): LEE, SEUNG H
• Application Number:
  US09/571,980
• Time in Patent Office: 764 Days
• Field of Search: 235/379, 235/383
• US Class Current: 235/379
• CPC Class Codes: G06K 5/00 Methods or arrangements for verifying the correctness of markings on a record carrier; Column detection devices
• CPC Class Codes: G06Q 20/1085 involving automatic teller machines [ATMs]
• CPC Class Codes: G06Q 20/18 involving self-service terminals [SST], vending machines, kiosks or multimedia terminals
• CPC Class Codes: G06Q 40/02 Banking, e.g. interest calculation or account maintenance credit or loans G06Q40/03
• CPC Class Codes: G07F 19/20 Automatic teller machines [ATMs]
• CPC Class Codes: G07F 19/201 Accessories of ATMs
• CPC Class Codes: G07F 19/207 Surveillance aspects at ATMs
• CPC Class Codes: G07F 19/211 Software architecture within ATMs or in relation to the ATM network

Abstract

A method is taught for analyzing the keystroke signature of a keyboard customer. The signature is compared to a database of previously stored keystroke sequences to allow for a statistical test for the identity of the user. This method allows for the use of varying keyboards to facilitate electronic commerce over the Internet from arbitrary terminals and personal computers.

Claims

1. A method of processing automatic teller machine transactions comprising the steps of:

measuring the timing parameters associated with the customer'"'"'s interactions with the machine,

transmitting the timing parameters to an analysis site,

transmitting transaction details to the analysis site,

comparing the timing parameters to a stored reference,

comparing the transaction details to the customer'"'"'s typical habits, and

using the results of both comparisons to make a decision as to whether or not to handle the transaction in a normal manner.

2. The method of claim 1 in which the distance of the ATM machine to the customer'"'"'s home is considered as a transaction detail in the acceptance decision.

3. The method of claim 1 in which the time of day of the transaction is considered as a transaction detail in the acceptance decision.

4. The method of claim 1 in which the day of the week of the transaction is considered as a transaction detail in the acceptance decision.

5. The method of claim 1 in which the customer is asked to estimated the parameters of previous transactions and the accuracy of those estimates is used in the acceptance decision as a transaction detail.

7. The method of claim 1 in which the automatic location information from the phone is weighed in the acceptance decision.

6. A method of processing electronic transactions involving a telephone comprising the steps of:

measuring the timing parameters associated with the customer'"'"'s interactions with the telephone keypad,

transmitting the timing parameters to an analysis site,

comparing the timing parameters to stored references which have acceptance criteria, and using the results of the comparison to make a decision as to whether or not to handle the transaction in a normal manner.

8. A method of processing electronic transactions comprising the steps of:

giving the customer variable commands requiring keyboard interaction,

measuring the timing parameters associated with the customer'"'"'s interactions with the keyboard,

transmitting the keyboard timing parameters to an analysis site

comparing those parameters to a stored reference which has acceptance criteria, and p1 using the results of this comparison to make a decision as to whether or not to handle the transaction in a normal manner.

9. The method of claim 8 in which the variable commands are demands that the customer enter at least one apparently random word.

10. The method of claim 8 in which the variable commands are demands designed to cause stress in the customer.

11. A method of processing electronic transactions comprising the steps of:

measuring the timing parameters associated with a customer'"'"'s

interactions with a keyboard,

transmitting the keyboard type to an analysis site,

transmitting the timing parameters to an analysis site,

noting if the keyboard type is one with which the customer has minimal experience,

using collaborative filtering to help establish acceptance criteria in the case of minimal experience,

comparing the transmitted keyboard timing parameters to the acceptance criteria, and

using the results of this comparison to make a decision as to whether or not to handle the transaction in a normal manner.

12. A method of processing electronic transactions comprising the steps of:

measuring the timing parameters associated with a customer'"'"'s interactions with a keyboard,

transmitting the timing parameters to an analysis site,

noting if the keyboard type is one with which the customer has minimal experience,

adjusting the stored acceptance criteria to establish new temporary acceptance criteria in the case of minimal experience to adjust for the customer'"'"'s learning time with the new keyboard,

comparing the transmitted keyboard timing parameters to the acceptance criteria, and

using the results of this comparison to make a decision as to whether or not to handle the transaction in a normal manner.

13. A method of processing electronic transactions comprising the steps of:

measuring the timing parameters associated with a customer'"'"'s interactions with a keyboard,

transmitting the timing parameters to an analysis site,

comparing the transmitted keyboard timing parameters to stored acceptance criteria,

using the results of this comparison to make a decision as to whether or not to handle the transaction in a normal manner, and

storing rejected keyboard signature entries for possible prosecution assistance.

14. A method of processing electronic transactions comprising the steps of:

measuring the timing parameters associated with a customer'"'"'s interactions with a keyboard,

transmitting the timing parameters to an analysis site,

noting the key which the customer uses for the “

enter”

command,

comparing the transmitted keyboard timing parameters to stored acceptance criteria,

comparing the key used for the “

enter”

command to the customer'"'"'s previous experience, and

using the results of both comparisons to make a decision as to whether or not to handle the transaction in a normal manner or not.

15. A method of processing electronic transactions comprising the steps of:

measuring the timing parameters associated with a customer'"'"'s interactions with a keyboard,

transmitting the timing parameters to an analysis site,

processing the transmitted keyboard timing parameters to transform them each into a percentage value of the total keyboard entry time for the appropriate data block entered,

comparing the percentage values to stored acceptance criteria, and

using the results of the comparison to make a decision as to whether or not to handle the transaction in a normal manner.

16. The method of claim 15 in which the keyboard timing parameters are transformed into a rank ordering instead of into a percentage of the total time.

17. A method of processing electronic transactions comprising the steps of:

measuring the timing parameters associated with the customer'"'"'s interactions with a keyboard,

transmitting the timing parameters to an analysis site,

calculating a measure of the variability in the timing parameters,

comparing those parameters to a stored reference which has acceptance criteria,

comparing the variability in the timing parameters to other acceptance criteria, and

using the results of both comparisons to make a decision as to whether or not to handle the transaction in a normal manner.